macOS Privacy Settings: Lock Apps from Coworkers & Shared Computer Users

Why macOS Privacy Settings Don't Lock Individual Apps

Mac's privacy settings excel at controlling what data apps can access — your camera, microphone, contacts, and location. But they don't solve a fundamental problem: stopping other people from opening your apps entirely.

If you share your Mac with coworkers in an office, family members at home, or work in a coworking space, macOS privacy controls won't prevent someone from opening your banking app, reading your messages, or accessing your password manager while you're away from your desk.

The Problem with macOS All-or-Nothing Security

Apple designed macOS security around the assumption that each Mac belongs to one person. You can:

• Lock your entire screen with a password
• Use FileVault to encrypt your drive
• Set privacy permissions for system resources

But there's no middle ground. You can't say "lock my banking apps but leave everything else accessible" or "require Touch ID for Messages but not for Safari."

This creates real problems for Mac users who need selective privacy:

• Shared office computers: Your coworkers don't need your screen lock password, but they shouldn't access your personal apps
• Family Macs: Kids can use educational apps, but parents want to protect financial software
• Coworking spaces: You want to step away briefly without doing a full system lock

Method 1: macOS Screen Time App Limits (Basic)

Screen Time can restrict app usage, but it's designed for parental controls, not privacy:

1. Open System Settings → Screen Time
2. Click App Limits → Add Limit
3. Select apps you want to restrict
4. Set time limit to "1 minute"
5. Enable "Block at End of Limit"

Limitations: This blocks apps after 1 minute of daily use, not immediately. Anyone can request "more time" with your admin password. It's clunky for real privacy needs.

Method 2: Hide Apps in Secure Folders

You can move sensitive apps to hidden locations:

1. Create a new folder: mkdir ~/Private
2. Move apps: mv /Applications/YourApp.app ~/Private/
3. Hide the folder: chflags hidden ~/Private
4. Launch apps via Spotlight or create aliases

Limitations: This provides security through obscurity, not actual protection. Tech-savvy users can still find hidden folders.

Method 3: Touch ID App Locking (Most Effective)

For real app-level privacy, you need third-party software that requires authentication before opening specific apps.

Lockish provides exactly this functionality:

• Touch ID protection: Each protected app requires Touch ID, Face ID, or your Mac password before opening
• Selective locking: Choose exactly which apps to protect while leaving others freely accessible
• Complete privacy: Displays a lock overlay that completely hides app content until authenticated
• Auto-lock features: Apps automatically re-lock after configurable idle periods (10 seconds to 60 minutes)
• Tamper protection: Requires Touch ID to remove apps from protection or quit Lockish

Setup process:

1. Install Lockish and grant Accessibility permissions
2. Add sensitive apps (banking, password managers, messages) to protection
3. Set individual auto-lock timeouts per app
4. Use ⌘L to instantly lock all protected apps when stepping away

Choosing the Right Privacy Level

Use Screen Time if you need basic time-based restrictions and don't mind the "request more time" prompts.

Use hidden folders if you're dealing with non-technical users and want apps out of sight.

Use Touch ID app locking if you need real security with convenience. This is the only method that provides true privacy protection while maintaining normal workflow.

Important Security Notes

App-level locking provides convenience security, not enterprise-grade protection. These methods won't stop a determined attacker with administrator access, but they're perfect for preventing casual access from coworkers, family members, or opportunistic snooping.

For truly sensitive data, combine app locking with FileVault disk encryption and strong user account passwords.

Getting Started with App Privacy

Start by identifying which apps actually contain sensitive information:

• Banking and financial apps
• Password managers
• Messages and communication apps
• Work-specific applications with confidential data

Don't over-protect — locking too many apps becomes inconvenient. Focus on the apps that would cause real problems if accessed by others.

macOS privacy settings handle data permissions well, but for controlling app access, you need dedicated privacy tools that work the way you actually use your Mac.